Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
File: mogMjbFaBDs74WXi2DG6oEerAKw.mft (raw, json)
Hash identifier: MdML9daeP2/NiTM5D0Fny9EVnn8VWFo3HgQ2ufCIWDo=
Subject key identifier: 19:86:D0:8C:AF:DA:AC:0D:2B:15:8F:3A:E8:55:6E:A1:C0:43:65:71
Authority key identifier: 9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
Certificate issuer: /CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Certificate serial: 019A7225A4C92296DD39678B7C5AC1D86CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
Manifest number: 09FC
Signing time: Tue 11 Nov 2025 09:01:00 +0000
Manifest this update: Tue 11 Nov 2025 09:01:00 +0000
Manifest next update: Wed 12 Nov 2025 09:01:00 +0000
Files and hashes: 1: mogMjbFaBDs74WXi2DG6oEerAKw.crl (hash: A2kC2sD3Pc6fc7LKhGGHWzGM+pb8eEcIMsh6/abictA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a4:c9:22:96:dd:39:67:8b:7c:5a:c1:d8:6c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Validity
Not Before: Nov 11 09:01:00 2025 GMT
Not After : Nov 12 09:01:00 2025 GMT
Subject: CN=1986d08cafdaac0d2b158f3ae8556ea1c0436571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:0f:b7:b6:f6:b9:97:d6:31:02:9f:cf:e3:
1c:37:a6:79:dc:a3:4d:a8:1a:57:8a:ae:ab:f2:3b:
39:b3:d2:46:21:80:0f:0b:11:d9:68:65:c3:3b:c9:
84:7c:a8:0f:fc:c0:99:23:5e:c5:aa:63:00:ef:b9:
cf:e8:cc:33:c4:d0:96:b3:7e:0b:8d:a7:47:3a:3d:
73:81:63:5e:ed:1d:a6:73:6f:55:70:cc:28:22:01:
eb:e0:ff:9d:29:72:dc:f8:3b:5f:f4:5a:6e:34:83:
9c:88:15:a2:1b:39:57:fc:3b:96:a3:b1:b6:d7:14:
a3:db:15:3a:2d:02:d1:8b:8d:e2:32:60:f1:b9:70:
77:3f:c9:66:40:98:ab:38:a9:9a:66:b8:e6:b0:2a:
2c:8f:92:0a:ec:d6:e6:73:d0:ff:12:b0:74:7a:aa:
50:d2:39:56:d9:08:a3:d9:ef:a6:43:5f:7d:4d:4d:
81:7d:10:68:79:16:16:a7:2a:bc:83:12:e2:a7:51:
34:89:9e:3c:ce:5c:e3:e6:51:82:d1:ab:86:b1:e8:
ee:a5:f8:ca:e0:f3:25:32:5e:86:32:8b:34:e5:43:
81:ea:c1:01:fc:c0:dc:01:cf:85:2e:19:5c:ba:97:
01:ec:4b:a8:64:5a:7a:12:85:a1:fb:e2:5e:90:4d:
20:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:86:D0:8C:AF:DA:AC:0D:2B:15:8F:3A:E8:55:6E:A1:C0:43:65:71
X509v3 Authority Key Identifier:
keyid:9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1e:4d:f3:65:d3:7d:2f:36:8a:b5:0f:6b:d1:e4:20:24:b6:
f0:65:f2:72:7d:05:a8:c5:07:05:40:12:c0:2b:c8:be:96:c9:
8c:07:40:8b:fb:23:5a:bd:05:30:d8:49:3d:bb:f0:bc:0f:7c:
48:a5:f3:46:8f:ee:2d:22:fe:73:41:a7:e5:02:bb:b5:94:df:
74:47:48:11:0f:79:5f:c4:7f:61:fa:0e:b3:36:47:14:86:cd:
8b:b1:31:d2:a3:3f:09:c5:77:91:b8:a2:8f:a1:83:c0:3b:8f:
e2:b8:6e:fe:93:b6:44:00:7b:04:83:4a:73:49:73:59:83:a0:
cf:c1:05:f9:98:73:76:e0:14:b9:6d:68:fa:3d:bf:d9:89:86:
41:16:97:6c:f6:91:f7:68:cc:8f:97:e8:b5:61:0c:38:65:ad:
47:6a:a4:2d:3d:c6:3f:49:c5:5a:81:97:13:31:bc:2f:e8:5b:
06:6a:9c:be:08:fa:36:18:46:80:b2:3c:86:ce:fc:c5:db:41:
68:fc:22:66:e1:f7:f4:3b:02:4e:8d:9a:c7:65:fa:a9:ca:44:
7c:6b:f2:d4:8c:54:94:71:c9:13:eb:62:8f:be:94:f3:5b:05:
3a:d7:ff:7a:21:82:82:0e:30:5f:cd:67:9c:0b:2c:61:53:c1:
25:29:16:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJaTJIpbdOWeLfFrB2Gy3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhODgwYzhkYjE1YTA0M2IzYmUxNjVlMmQ4MzFiYWEwNDdh
YjAwYWMwHhcNMjUxMTExMDkwMTAwWhcNMjUxMTEyMDkwMTAwWjAzMTEwLwYDVQQD
EygxOTg2ZDA4Y2FmZGFhYzBkMmIxNThmM2FlODU1NmVhMWMwNDM2NTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDEPt7b2uZfWMQKfz+McN6Z53KNN
qBpXiq6r8js5s9JGIYAPCxHZaGXDO8mEfKgP/MCZI17FqmMA77nP6MwzxNCWs34L
jadHOj1zgWNe7R2mc29VcMwoIgHr4P+dKXLc+Dtf9FpuNIOciBWiGzlX/DuWo7G2
1xSj2xU6LQLRi43iMmDxuXB3P8lmQJirOKmaZrjmsCosj5IK7Nbmc9D/ErB0eqpQ
0jlW2Qij2e+mQ199TU2BfRBoeRYWpyq8gxLip1E0iZ48zlzj5lGC0auGsejupfjK
4PMlMl6GMos05UOB6sEB/MDcAc+FLhlcupcB7EuoZFp6EoWh++JekE0gAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmG0Iyv2qwNKxWPOuhVbqHAQ2VxMB8GA1UdIwQY
MBaAFJqIDI2xWgQ7O+Fl4tgxuqBHqwCsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW9nTWpiRmFCRHM3NFdYaTJERzZvRWVyQUt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yOGU3N2EtZWRlMi00ZWI3LWEzNDct
OWQzZjM5MzdjYzQ3LzEvbW9nTWpiRmFCRHM3NFdYaTJERzZvRWVyQUt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yOGU3N2EtZWRlMi00ZWI3LWEzNDctOWQzZjM5MzdjYzQ3
LzEvbW9nTWpiRmFCRHM3NFdYaTJERzZvRWVyQUt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAch5N82XT
fS82irUPa9HkICS28GXycn0FqMUHBUASwCvIvpbJjAdAi/sjWr0FMNhJPbvwvA98
SKXzRo/uLSL+c0Gn5QK7tZTfdEdIEQ95X8R/YfoOszZHFIbNi7Ex0qM/CcV3kbii
j6GDwDuP4rhu/pO2RAB7BINKc0lzWYOgz8EF+ZhzduAUuW1o+j2/2YmGQRaXbPaR
92jMj5fotWEMOGWtR2qkLT3GP0nFWoGXEzG8L+hbBmqcvgj6NhhGgLI8hs78xdtB
aPwiZuH39DsCTo2ax2X6qcpEfGvy1IxUlHHJE+tij76U81sFOtf/eiGCgg4wX81n
nAssYVPBJSkW8w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:05 2025 by rpki-client